src/usr.bin/ssh/sftp-server.8 - diff

Return to sftp-server.8 CVS log

Up to [local] / src / usr.bin / ssh

Diff for /src/usr.bin/ssh/sftp-server.8 between version 1.23 and 1.24

-version 1.23, 2013/07/16 00:07:52
+version 1.24, 2013/10/09 23:42:17
 Line 30
 Line 30
 Line 30
  .Nd SFTP server subsystem
  .Sh SYNOPSIS
  .Nm sftp-server
+ .Bk -words
  .Op Fl ehR
  .Op Fl d Ar start_directory
  .Op Fl f Ar log_facility
  .Op Fl l Ar log_level
  .Op Fl u Ar umask
+ .Ek
+ .Nm
+ .Fl Q Ar protocol_feature
  .Sh DESCRIPTION
  .Nm
  is a program that speaks the server side of SFTP protocol
-Line 93
+Line 97
 Line 93
 Line 97
  DEBUG and DEBUG1 are equivalent.
  DEBUG2 and DEBUG3 each specify higher levels of debugging output.
  The default is ERROR.
+ .It Fl P Ar blacklisted_requests
+ Specify a comma-separated list of sftp protocol requests that are banned by
+ the server.
+ .Nm
+ will reply to any blacklisted request with a failure.
+ The
+ .Fl Q
+ flag allows querying
+ .Nm
+ to determine the supported request types.
+ If both a blacklist and a whitelist are specified, then the blacklist is
+ applied before the whitelist.
+ .It Fl p Ar whitelisted_requests
+ Specify a comma-separated list of sftp protocol requests that are permitted
+ by the server.
+ All request types that are not on the whitelist will be logged and replied
+ to with a failure message.
+ .Pp
+ Care must be taken when using this feature to ensure that requests made
+ implicitly by sftp clients are permitted.
+ .It Fl Q Ar protocol_feature
+ Query protocol features supported by
+ .Nm .
+ At present the only feature that may be queried is
+ .Dq requests ,
+ that may be used for whitelisting or blacklisting (flags
+ .Fl p
+ and
+ .Fl P
+ respectively.)
  .It Fl R
  Places this instance of
  .Nm